$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa File: df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa (raw, json) Hash identifier: 4txcn59+MvkrMDaRK8DJ7koqnkCKNRZwM/1LuLHPElw= Subject key identifier: 95:72:D0:DA:FE:20:7C:87:69:36:A8:24:12:D8:C9:AC:2F:2F:6F:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F855005EFD62C93860890 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396574 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:50:05:ef:d6:2c:93:86:08:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ecba78b0-a876-40fc-b33d-3d9d4a3813e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:2a:e9:17:7a:19:82:40:8d:18:45:58:17: 86:cf:65:3a:81:88:82:af:41:f6:99:18:dc:af:2e: c5:e2:ab:e8:5e:4e:f3:10:1c:3f:60:e7:10:ee:b5: 1b:92:7a:a4:b5:38:99:94:d1:c9:a6:46:fd:5f:94: 9b:46:e4:bb:34:1e:b9:95:86:a4:04:ae:ba:a8:e4: 4f:43:a5:01:98:01:bd:23:ec:27:1d:7e:09:0a:4e: b2:95:60:9f:4f:88:eb:d8:26:19:56:90:3b:84:0d: 6a:a8:9c:3b:3e:24:d6:e5:9c:e7:bc:9a:97:1e:d0: 1f:d0:fb:60:56:ba:96:b7:b0:cc:93:a2:7c:43:da: d4:a8:55:8f:e8:5e:d2:b5:a2:3c:18:52:66:52:83: af:7d:c3:57:29:82:40:92:93:5c:a0:8d:bd:aa:21: b1:98:cd:d4:41:f8:59:4a:07:67:2c:d0:f6:5b:7e: 16:bd:f7:6b:d9:ce:ea:9a:0b:40:97:be:07:eb:a8: 38:ba:fc:7a:9b:ad:11:ef:5a:dd:79:34:a4:d6:58: 26:71:a0:fd:a1:9d:a0:99:03:c7:ff:18:3e:91:9d: 31:82:df:7e:d5:9b:9e:2b:d2:cd:ed:cb:54:8b:87: 76:08:4b:34:6b:54:74:99:e0:9b:24:15:0e:5e:84: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:D0:DA:FE:20:7C:87:69:36:A8:24:12:D8:C9:AC:2F:2F:6F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:19:10:f3:e3:28:88:dd:40:e2:24:49:b9:58:34:50:89:51: df:a3:db:72:58:a6:b6:f1:1c:6f:13:93:75:f4:69:c2:5c:3c: cb:de:49:ef:a5:80:e2:5c:db:d7:87:ba:cf:a8:0a:c5:f4:7b: c4:38:f9:d9:8c:0e:74:96:a6:d6:8f:6e:d3:3b:07:e9:1e:d8: 80:fe:bc:7a:8d:b9:dd:7e:3f:41:e4:99:74:23:4c:72:da:01: fa:52:ac:be:20:eb:9e:9b:6d:cc:bf:bd:e6:73:4b:96:4c:65: 66:e5:d9:37:b3:43:6c:7e:a2:67:3d:a1:86:08:c6:04:96:4a: a5:17:63:f4:f6:90:df:72:f1:35:28:d9:57:e1:61:3d:7d:80: 0d:64:01:0b:be:5b:3f:65:f3:9b:85:35:d8:bf:4d:fe:7a:61: 40:c9:48:1a:60:74:f0:f5:a0:cb:58:0f:36:c3:49:16:f4:fe: 36:1f:af:18:0e:5b:ea:92:de:17:e7:57:fd:86:54:54:65:64: cd:29:05:f2:2c:3b:63:68:5f:19:05:8e:ed:6b:c4:c2:0c:60: 4e:65:c0:27:17:09:9a:97:e9:ee:e7:b8:5b:2e:44:68:8a:e0: 59:44:64:89:f1:bb:4e:5a:de:c9:39:c2:24:2b:a7:63:17:c8: 7a:94:fd:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4VQBe/WLJOGCJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWNiYTc4YjAtYTg3Ni00MGZjLWIzM2QtM2Q5ZDRhMzgxM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Iq6Rd6GYJAjRhFWBeGz2U6gYiCr0H2mRjc ry7F4qvoXk7zEBw/YOcQ7rUbknqktTiZlNHJpkb9X5SbRuS7NB65lYakBK66qORP Q6UBmAG9I+wnHX4JCk6ylWCfT4jr2CYZVpA7hA1qqJw7PiTW5ZznvJqXHtAf0Ptg VrqWt7DMk6J8Q9rUqFWP6F7StaI8GFJmUoOvfcNXKYJAkpNcoI29qiGxmM3UQfhZ SgdnLND2W34Wvfdr2c7qmgtAl74H66g4uvx6m60R71rdeTSk1lgmcaD9oZ2gmQPH /xg+kZ0xgt9+1ZueK9LN7ctUi4d2CEs0a1R0meCbJBUOXoTBFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJVy0Nr+IHyHaTaoJBLYyawvL2+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY1NGNmMzAtNzM0ZC0z YmFhLThjNmUtZGNmYWM0YmMyZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANGRDz4yiI3UDiJEm5WDRQiVHfo9tyWKa28RxvE5N19GnCXDzL3knv pYDiXNvXh7rPqArF9HvEOPnZjA50lqbWj27TOwfpHtiA/rx6jbndfj9B5Jl0I0xy 2gH6Uqy+IOuem23Mv73mc0uWTGVm5dk3s0NsfqJnPaGGCMYElkqlF2P09pDfcvE1 KNlX4WE9fYANZAELvls/ZfObhTXYv03+emFAyUgaYHTw9aDLWA82w0kW9P42H68Y Dlvqkt4X51f9hlRUZWTNKQXyLDtjaF8ZBY7ta8TCDGBOZcAnFwmal+nu57hbLkRo iuBZRGSJ8btOWt7JOcIkK6djF8h6lP1u -----END CERTIFICATE-----Generated at Sun May 11 05:32:05 2025 by rpki-client